TfL confirms bank details hacked in cyber attack as boy, 17, arrested

Some 5,000 customers have been affected after customer bank details were hacked
-Credit: (Image: Jakub Porzycki/NurPhoto via Getty Images)


Transport for London has confirmed the bank details of 5,000 customers were hacked in a cyberattack which plagued its systems on September 1. Despite officials insisting last week there was no evidence customer data had been compromised, TfL now admits some Oyster card refund data has been accessed.

This could include both bank account numbers and sort codes. A 17-year-old boy has been arrested in Walsall on suspicion of cyber offences in relation to the attack.

Anyone affected by the private information leak will be contacted by the authority as soon as possible. Due to TfL restricting access to part of its website and booking systems all applications for new Oyster photocards have been suspended temporarily.

READ MORE: Newham mum, 48, who died in fireball may have been covered in 'accelerant' as murder probe launched

Oyster card
Oyster photocard applications have been temporarily suspended -Credit:Mercury

The transport network is also unable to issue refunds for incomplete pay-as-you-go journeys, while you're also unable to access your online journey history if you used contactless. Along with payment issues, live Tube arrival information is not available on TfL Go and the TfL website.

The National Crime Agency is leading the law enforcement to the response which affected TfL services. The teenager, who was arrested on September 5, was questioned by NCA officers and bailed.

Deputy Director Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “Attacks on public infrastructure such as this can be hugely disruptive and lead to severe consequences for local communities and national systems. The swift response by TfL following the incident has enabled us to act quickly, and we are grateful for their continued co-operation with our investigation, which remains ongoing.

“The NCA leads the UK’s response to cybercrime. We work closely with partners to protect the public by ensuring cyber criminals cannot act with impunity, whether that be by bringing them before the courts or through other disruptive and preventative action.”

Get the latest travel news from London's roads, trains and buses with our new London Traffic and Travel newsletter. You can sign up HERE.